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CLAIMS 

What is claimed is: 



1 A modified JAVA(TM) execution enviromnent comprising: 

2 \a substantially unmodified JAVA(TM) Virtual Machine, 

3 a stet of substantially unmodified base classes; 

4 one orsmore overlays to the set of substantially unmodified base classes, 

5 the one or more overlays enabling corresponding base classes to 

6 support shared access by one or more substantially unmodified 

7 JAVA(TM) a^lications; 

8 an unmodified primordial class loader for loading the system base 

9 classes as overlaid bVthe one or more overlays to the base classes; 

10 a security manager supporting multiple applications and for limiting 

1 1 access to system resources according to user permissions; and 

12 an dynamic class loader generator fbr creating a class loader for loading 

13 an application, the application class^ and creating a thread group for 

14 the appUcation, \ 

1 2. The modified JAVA(TM) execution environmerk of claim 1 , wherein 

2 the application includes at least one of an application class rcmder and an 

3 application security manager. \ 
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1 \3. The modified JAVA(TM) execution environment of claim 1, wherein 

2 tn^ one or more overlays include overlays to file classes to limit access to 

3 system resources according to user permissions associated with the application. 

1 4. Vhe modified JAVA(TM) execution environment of claim 1, wherein 

2 the application includes at least one of an application class loader and an 

3 applicationVecurity manager. 

1 5. The mMified JAVA(TM) execution environment of claim 1, wherein 

2 the application includes one or more invocations of Abstract Window Toolkit 

3 (AWT) classes. \ 

1 6. The modified \aVA(TM) execution environment of claim 1, wherein 

2 the one or more overlay^ support determining a calling application. 

1 7. The modified JAVAlTM) execution environment of claim 6, wherein 

2 the determining a calling application comprises identifying the class loader of a 

3 calling method, and using the cWss loader to identify the application. 

1 8. The modified JAVA(TM) execution environment of claim 6, wherein 

2 the determining a calling applicationVomprises identifying the thread group for 

3 a calling method, and lising the thread Wiip to identify the application, 

1 9. A method of supporting a numberW applications in a single JAVA(TM) 

2 execution environment, the method comprismg: 
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3 means for generating a class loader for each of the applications in the 

4 \ number of applications, the class loader providing a name space for 

5 each application, and a thread group for each application; 

6 mean^for overlaying one or more substantially unmodified base classes 

7 to support the number of applications; and 

8 means for\determining a calling application for a method. 

1 10. The methodW claim 9, wherein at least one of the number of 

2 applications includes an application class loader. 

1 11. The method of claim 9, wherein at least one of the number of 

2 applications includes an application security manager. 

1 12. A computer data signa\ embodied in a carrier wave comprising: 

2 a computer program for supporting a number of substantially 

3 unmodified JAVA(T]Vn applications on a substantially unmodified 

4 JAVA(TM) Virtual MacMne (A^M), the JVM including a set of 

5 substantially unmodified base classes and a substantially unmodified 

6 primordial class loader, the program comprising: 

7 a first set of instructions for generating a class loader for each of the 

8 JAVA(TM) applications in the number of JAVA(TM) 

9 applications, the class loader providing a name space for each 

10 application, and a thread group For each application; 

11 a second set of instructions for overlaying one or more substantially 

12 unmodified base classes to support me number of applications; 

13 and \ 
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14 \ third set of instructions for determining a calling application for a 

1 5 \ method. 

1 13. The computer data signal of claim 12, wherein the first set of 

2 instructions further associates a user with each application, and wherein the 

3 program further comprrses a fourth set of instructions for limiting access to a 

4 system resource by an application according to whether the user associated with 

5 the application has access to tl^ system resource. 

6 \ 
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